Catalog Home Page

Automated traffic classification and application identification using machine learning

Zander, S., Nguyen, T. and Armitage, G. (2005) Automated traffic classification and application identification using machine learning. In: IEEE Conference on Local Computer Networks (LCN) 2005: 30th Anniversary, 17 November 2005, Sydney, Australia

[img]
Preview
PDF - Published Version
Download (222kB) | Preview
Link to Published Version: http://dx.doi.org/10.1109/LCN.2005.35
*Subscription may be required

Abstract

The dynamic classification and identification of network applications responsible for network traffic flows offers substantial benefits to a number of key areas in IP network engineering, management and surveillance. Currently such classifications rely on selected packet header fields (e.g. port numbers) or application layer protocol decoding. These methods have a number of shortfalls e.g. many applications can use unpredictable port numbers and protocol decoding requires a high amount of computing resources or is simply infeasible in case protocols are unknown or encrypted. We propose a novel method for traffic classification and application identification using an unsupervised machine learning technique. Flows are automatically classified based on statistical flow characteristics. We evaluate the efficiency of our approach using data from several traffic traces collected at different locations of the Internet. We use feature selection to find an optimal feature set and determine the influence of different features

Publication Type: Conference Paper
URI: http://researchrepository.murdoch.edu.au/id/eprint/35006
Item Control Page Item Control Page

Downloads

Downloads per month over past year